How often new firmware avalable checks (how long until flashing icon)?

[JohnD5000]

How often does the new firmware notification check the server? I am on 380.64-1. I know there is a 380.64.2 out But there is no flashing icon at top of the webui. If I click on the check button, it tells me that there is a new version out (but still no flashing icon). I also rebooted, but still no flashing icon. I checked the forum on 1/6 and saw there was a new version out very recently, and another new version is out today (1/8), so I probably haven't let enough time pass for the flashing icon to appear, but I just want to see if that actually works?

Thanks

 

[RMerlin]

Scheduled checks are made every 48 hours.

 

[JohnD5000]

Scheduled checks are made every 48 hours.

OK, I will wait a few days and see if flashing icon shows up. Thanks

 

[MarkRH]

I've never waited long enough but I do see the flashing if I check for a new version, restart the browser (I always do before flashing) and then look at the router again. So, if it checked 1 minute before the new version was live, you'd have to wait 2 days to see it.

 

[JohnD5000]

I've never waited long enough but I do see the flashing if I check for a new version, restart the browser (I always do before flashing) and then look at the router again. So, if it checked 1 minute before the new version was live, you'd have to wait 2 days to see it.

Hmm, as I said in my original message, I did this but no flashing icon. I wonder why it works different for me?

 

[JohnD5000]

"New firmware version check" is On? in Tool-Other settings.
I'm not sure if this have an influence for the no flashing icon when you click on "check", but for the "Scheduled checks" yes

Yup "New firmware version check" set to yes

 

[sfx2000]

Yup "New firmware version check" set to yes

FWIW - this seems like a really bad idea...

I can fake being someone else, and put an agent inside the FW, and say this is something new and improved...

And people would download it...

Kinda scary eh?

 

[RMerlin]

Kinda scary eh?

Not really. Because if you are already inside the router to do that, then you don't need the end user to visit a fake download site - you are already owning that device.

BTW, the update checker uses HTTPS, and the certificate validity is enforced. So if someone were to hijack your DNS and redirect you to a fake server, they would still need a valid certificate for that domain - invalid certificates will cause the update checker to fail.

 

[sfx2000]

Not really. Because if you are already inside the router to do that, then you don't need the end user to visit a fake download site - you are already owning that device.

But then a black hat could own more eh?

They're not targeting one device, they're targeting many...